harald/VerityBook
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

mkrelease.sh: prevent double sign

Browse source
This commit is contained in:
Harald Hoyer 2018-09-14 12:43:15 +02:00
parent 4c966c6d4a
commit 82d771110c
1 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
mkrelease.sh
View file

@ -73,9 +73,11 @@ IMAGE="${BASEDIR}/$(jq -r '.name' ${JSON})-$(jq -r '.version' ${JSON})"
echo "Need --dbkey KEY --dbcrt CRT options"
exit 1
fi
if ! sbverify --cert "$DBCRT" bootx64.efi &>/dev/null ; then
sbsign --key "$DBKEY" --cert "$DBCRT" --output bootx64-signed.efi bootx64.efi
mv bootx64-signed.efi bootx64.efi
fi
fi
[[ -f sha512sum.txt ]] || sha512sum * > sha512sum.txt
[[ -f sha512sum.txt.sig ]] || gpg2 --detach-sign sha512sum.txt
)